METHOD AND SYSTEM FOR ACCESS AUTHORIZATION INVOLVING GROUP MEMBERSHIP ACROSS A DISTRIBUTED DIRECTORY

摘要

A system is presented for performing a directory operation within adistributed directory environment that includes distributed directory serversand a proxy server that acts as an intermediate agent between a client and thedistributed directory environment. The proxy server sends requests todirectory servers to collect information about group memberships for a userwith respect to group entries within each portion of a distributed directorythat is supported by each directory server. The proxy server sends thecompiled information of group memberships for the user along with anydirectory operation that the proxy server requests on behalf of the user. Adirectory server receives the compiled information of group memberships alongwith a requested directory operation and then performs the requested directoryoperation with respect to its locally stored portion of the distributeddirectory information tree and with respect to the received information ofgroup memberships for the user.